Legal

Privacy Policy

Last updated: 17 October 2026

1. Who we are

Goomzo is a cloud contact center service operated by Portworth Systems ("we", "us"), based in Kenya. This policy explains how we handle personal data when you visit this website, contact us, or use Goomzo. We process personal data in line with the Kenya Data Protection Act, 2019.

For the data you send us through this website we are the data controller. For the call, message and customer data our clients store in Goomzo, the client is the controller and we process that data on their behalf, under our agreement with them.

2. What we collect

Contact form and enquiries: your name, email address, phone number, company and the message you send us.
Account data: for users of Goomzo, your name, email address, sign-in details and security settings such as two-factor authentication.
Technical data: your IP address, browser type and the pages you request, recorded in server logs to keep the service secure and working.
Cookies: as described in Cookies below.

3. How we use it

To answer your enquiry, arrange a demo and send you the information you asked for, based on your consent.
To provide, secure and support the Goomzo service, as needed to perform our contract with our clients.
To prevent abuse and fraud, and to keep our systems secure, based on our legitimate interests.
To meet our legal, tax and accounting obligations.

We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

We share personal data only with service providers who help us run our business, under contracts that require them to protect it, including:

our customer relationship management system (ERPNext), where enquiries from the contact form are recorded as sales leads;
hosting, email and telephony providers that run the Goomzo platform.

We may also disclose data when the law requires it. Where data is transferred outside Kenya, we make sure it is protected as the Data Protection Act requires.

5. How long we keep it

We keep enquiry data for as long as needed to respond and follow up, and for up to 24 months after our last contact with you, unless you become a client. Account data is kept for as long as the account is active and then deleted or anonymised, except where we must keep records by law.

6. Security

We protect personal data with encryption in transit, access controls, two-factor authentication for administrators, and regular backups. No system is completely secure, but we work to protect your data and will notify you and the Office of the Data Protection Commissioner of a breach where the law requires it.

7. Your rights

Under the Data Protection Act you have the right to:

be informed of how your personal data is used;
access the personal data we hold about you;
ask us to correct or delete it;
object to its processing, or withdraw your consent at any time;
ask for a copy of your data in a portable format.

To use these rights, contact us as described below. If you are not satisfied with our response, you may complain to the Office of the Data Protection Commissioner.

8. Cookies

Cookies are small files stored by your browser. We use:

Essential cookies that keep you signed in, protect forms against forgery (CSRF) and remember your cookie choice. The site cannot work without them, so they don't need consent.
Optional cookies that help us understand how the site is used. We only set these if you choose "Accept all".

You can change your choice at any time: . You can also block or delete cookies in your browser settings.

9. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed; significant changes will be highlighted on this website.

10. Contact us

For questions about this policy or your personal data, contact Portworth Systems through our contact form.